qr999 Privacy Policy

1. Who We Are

qr999 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at qr999.bet, offering services that include cricket and sports betting, live casino games, and slot games to players across Pakistan. qr999 is the data controller responsible for the personal information collected through the qr999 platform.

For all privacy-related enquiries, you may contact us directly through the live chat feature on the qr999 platform, or by email at the address provided in Section 14 of this policy. qr999 is committed to transparent, fair, and lawful processing of all personal data entrusted to us by our players.

2. Data We Collect

qr999 collects personal data across several categories, depending on the nature of your interaction with the platform. The categories of data we may collect include:

3. How We Collect Your Data

qr999 collects personal data through the following means:

• Direct Submission: When you register an account on qr999, complete your KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion, you directly provide us with personal data.
• Automated Collection: As you navigate the qr999 platform, technical and usage data is automatically collected through cookies, server logs, and similar tracking technologies. This data helps us maintain platform security, detect fraud, and understand how players use our services.
• Third-Party Sources: In certain cases, qr999 may receive data about you from third-party partners, including payment processors (such as JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK), identity verification service providers, and fraud prevention agencies. This data is used strictly for the purposes of verifying your identity and preventing financial crime.
• Publicly Available Sources: Where relevant for compliance or fraud prevention purposes, qr999 may access publicly available information, such as sanctions lists or public records, to verify account holder details.

4. How We Use Your Data

qr999 uses collected personal data for the following clearly defined purposes:

• Account Management: To create, maintain, verify, and administer your qr999 account, including processing your registration and KYC documentation.
• Service Delivery: To enable you to place bets, access casino games, and use all features of the qr999 platform.
• Financial Processing: To process deposits and withdrawals in PKR via your chosen payment method, and to maintain accurate transaction records.
• Legal and Regulatory Compliance: To fulfil qr999's obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming regulations, including age verification (21+).
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, and other security threats to the qr999 platform.
• Responsible Gaming: To monitor player activity for signs of problem gambling and to enforce self-exclusion or deposit limit requests made by players through qr999's responsible gaming tools.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain a record of your interactions with our support team.
• Platform Improvement: To analyse usage patterns and improve the qr999 platform's features, performance, and content offering.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out of marketing emails at any time via the unsubscribe link in any communication or through your account settings.

qr999 does not use your personal data for automated decision-making or profiling that produces significant legal or similarly significant effects without your prior consent, except where required by law or strictly necessary for fraud prevention.

5. Legal Basis for Processing

qr999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to fulfil the contract between you and qr999 — including account management, bet settlement, and payment processing — is conducted on the basis of contractual necessity.
• Legal Obligation: Certain processing activities, particularly KYC verification, AML monitoring, and age verification, are required by applicable law and are conducted on that basis.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is conducted on the basis of qr999's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where qr999 relies on your consent — such as for marketing communications or non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

6. Data Sharing and Disclosure

qr999 does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients, strictly for the purposes described in this policy:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK receive the minimum data necessary to process your financial transactions. These providers are subject to their own privacy and data security obligations.
• Identity Verification Partners: Third-party KYC and AML service providers may receive your identity documents and related data for the purpose of verifying your age and identity in compliance with regulatory requirements.
• Game Providers: Certified third-party game studios that supply qr999's casino and slot games may receive anonymised technical data necessary to deliver their game content. No personally identifiable information is shared with game providers for marketing purposes.
• Regulatory and Law Enforcement Authorities: qr999 may disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction — including but not limited to financial intelligence units and anti-money laundering authorities.
• Fraud Prevention Agencies: Where qr999 suspects fraudulent activity, relevant data may be shared with specialist fraud prevention agencies to protect both the platform and its players.
• Professional Advisors: qr999's legal counsel, auditors, and compliance advisors may access personal data strictly to the extent necessary to provide professional services to qr999.

7. Cookies and Tracking Technologies

qr999 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device when you visit the qr999 website. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These are essential for the qr999 platform to function. They enable core features such as session management, login authentication, and security controls. These cookies cannot be disabled without impacting your ability to use the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming configurations — so that you do not need to re-enter them each session.
• Analytics Cookies: qr999 uses analytics tools to understand how players interact with the platform. Data collected through analytics cookies is aggregated and anonymised; it does not identify you personally.
• Security Cookies: These cookies support qr999's fraud detection and account security systems by flagging unusual session behaviour or access patterns.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the qr999 platform. qr999 does not use third-party advertising cookies or behavioural tracking cookies that profile you for cross-site advertising purposes.

8. Data Retention

qr999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The general retention principles qr999 applies are as follows:

• Active Account Data: Personal data associated with an active qr999 account is retained for the duration of the account relationship and for a period of up to five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, as required by applicable AML regulations.
• Transaction Records: Financial transaction records, including deposit and withdrawal histories in PKR, are retained for a minimum of five (5) years.
• Support Communications: Records of customer support interactions are retained for up to three (3) years following closure of the relevant support case.
• Marketing Data: If you opt out of marketing communications, your opt-out preference is retained indefinitely to ensure compliance with your request.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

9. Data Security

qr999 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• TLS/SSL encryption for all data transmitted between your device and qr999's servers.
• Encrypted storage of sensitive personal and financial data at rest using industry-standard encryption algorithms.
• Strict role-based access controls limiting internal access to personal data to only those employees and contractors who require it to perform their duties.
• Regular security assessments and penetration testing of qr999's technical infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• A documented incident response procedure for identifying, containing, and reporting data security incidents in a timely manner.

While qr999 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own qr999 account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

10. Your Privacy Rights

As a qr999 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the qr999 support team via live chat or email:

• Right of Access: You have the right to request a copy of the personal data qr999 holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data qr999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. Note that this right may be limited where qr999 is required by law to retain certain data (for example, AML record-keeping obligations).
• Right to Restriction: You may request that qr999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transferred to another data controller where technically feasible.
• Right to Object: You may object to qr999's processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming purposes. qr999 will assess your objection and cease processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time through your account settings or by contacting support.

qr999 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further two months, of which you will be notified promptly.

11. Children's Privacy

qr999 is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes mandatory age verification steps, and we may request documentary proof of age at any point during your use of the platform.

If qr999 discovers that personal data has been collected from an individual under the age of 21, that data will be immediately deleted and the associated account will be permanently closed. Any funds deposited by an underage individual will be reviewed and returned in accordance with qr999's Terms and Conditions.

If you believe that a minor has created an account on qr999, please contact our support team immediately so that we can investigate and take appropriate action without delay.

12. Third-Party Services and Links

The qr999 platform may reference third-party service providers whose services are integrated into our platform — including payment gateways and game providers. These third parties operate under their own privacy policies, and qr999 is not responsible for the data practices of third-party services beyond the data processing agreements we hold with them as described in Section 6.

qr999 does not embed third-party advertising networks, social media tracking pixels, or cross-site behavioural profiling tools on the qr999 platform. Any data shared with integrated third-party services is limited strictly to what is necessary to deliver that service to you as a qr999 player.

13. Changes to This Privacy Policy

qr999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, qr999 will notify registered players via email or through a prominent notice on the qr999 platform prior to the changes taking effect.

The effective date at the top of this policy indicates when the current version was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how qr999 protects your personal data. Your continued use of the qr999 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way qr999 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the qr999 platform. Our support team will route privacy-specific enquiries to the appropriate team.
• Email: [email protected] — please include "Privacy Request" in the subject line so your message is directed to our data privacy team promptly.

qr999 is committed to resolving all privacy-related concerns in a timely and transparent manner. We aim to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 30 days.